I've also seen them hijack http streams.

https://blog.ryankearney.com/2013/01/comcast-caught-intercep...